Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa
File: a39e7546-9d76-41dc-99d2-139c9526f29b.roa (raw, json)
Hash identifier: pRB5xAY1sBKXnn9C076wVezgWE5FwE3w5V2wvwtiC3w=
Subject key identifier: 5A:C1:0E:FA:65:A4:7A:40:F4:0F:8D:CE:56:EB:CB:D5:07:44:F2:5B
Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial: 4E5A1586D3793A4CA0C326A93E0910B2040F9E14
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa
Signing time: Tue 14 Oct 2025 00:22:03 +0000
ROA not before: Tue 14 Oct 2025 00:22:03 +0000
ROA not after: Tue 18 Nov 2025 23:59:59 +0000
asID: 16509
IP address blocks: 130.176.96.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:5a:15:86:d3:79:3a:4c:a0:c3:26:a9:3e:09:10:b2:04:0f:9e:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Validity
Not Before: Oct 14 00:22:03 2025 GMT
Not After : Nov 18 23:59:59 2025 GMT
Subject: serialNumber=9a2df67f467b79fdffdda742518674070cc53f6d9951403c5af71d7d3f71842e, CN=b25c970f-d813-445c-bfe2-62668518c87e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:79:76:70:ed:70:24:57:fa:bf:30:d5:71:bb:
1c:6a:6e:dc:35:ca:31:29:c9:1d:f8:cb:a9:41:6f:
bc:74:fa:81:f5:c8:aa:55:4f:1a:c6:1b:1a:79:8b:
e9:80:eb:ee:77:a3:e8:15:67:ca:13:7e:3e:c6:d2:
57:6d:de:91:0e:c1:54:3a:15:38:cd:dd:0d:8d:fe:
e4:82:42:1c:75:c7:08:7f:2e:74:36:53:b5:2b:44:
0f:f7:79:09:02:8a:23:5d:f2:c7:77:d4:8f:42:ef:
0b:f5:a8:a2:a9:8f:23:1f:ce:72:c8:26:14:3f:74:
d6:79:96:28:e8:19:02:a4:7b:50:e3:bd:44:d0:b2:
1d:b3:2f:84:fa:ab:fc:52:e6:b5:74:75:ec:1b:2d:
47:7f:a8:1d:a8:a6:76:8e:33:9f:61:9b:73:a2:36:
73:f1:9b:2c:d2:dc:e4:33:99:24:cb:0b:7e:ba:49:
3d:5c:98:7d:8c:fc:2b:2c:60:ae:dc:58:f3:70:0d:
4f:49:81:a0:5a:5a:c1:8b:5f:d1:06:8e:0d:ff:bf:
f7:2f:4f:5f:88:a4:32:e7:c3:86:78:37:d0:ca:85:
6e:1f:37:7c:4a:b9:5c:87:1c:02:30:05:ff:2e:24:
fb:2a:49:f5:95:4d:bf:73:c3:af:d5:9e:3f:be:88:
d8:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:0E:FA:65:A4:7A:40:F4:0F:8D:CE:56:EB:CB:D5:07:44:F2:5B
X509v3 Authority Key Identifier:
keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/a39e7546-9d76-41dc-99d2-139c9526f29b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.176.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a8:a7:26:b7:53:53:dc:cd:5b:82:dc:23:e0:b0:ff:17:4b:34:
40:1b:7e:a3:2f:5a:60:7d:90:ca:86:ee:54:7c:3c:f1:c8:69:
94:4f:e7:4d:89:e9:a5:25:e7:6b:1e:af:5e:83:b7:d6:5c:35:
b4:16:d2:69:fa:e9:37:0e:4d:d3:36:70:24:17:eb:33:33:ba:
09:00:d7:72:db:e7:82:a8:99:a9:e5:ae:9b:82:8d:4d:ab:1c:
d5:84:42:e3:e8:91:91:43:82:3d:d1:07:69:46:75:91:c3:5b:
30:8b:99:c9:27:10:67:67:ed:9e:c1:5a:27:17:63:24:ac:9b:
60:92:59:e4:cf:40:6d:91:00:00:36:ef:f9:50:d8:a2:cf:cc:
09:25:17:a7:22:12:a4:9e:52:88:2d:c6:dc:c7:c7:a3:a3:2e:
3e:cd:e3:82:3a:67:ef:82:75:35:b6:97:34:dc:e8:63:06:e2:
2b:35:06:8e:80:45:47:87:b9:1d:64:bf:c2:7c:6c:50:3c:50:
90:ef:45:cc:ba:9b:47:fa:2e:a1:a7:ec:1c:6f:54:22:46:09:
51:c0:b6:47:bc:2d:0b:90:8f:e9:0c:d8:ed:bf:18:10:24:6e:
14:48:86:75:e0:53:48:9d:5b:6f:af:44:58:43:4a:d5:5e:3f:
e6:4f:ec:53
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIUTloVhtN5OkygwyapPgkQsgQPnhQwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi
MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjUxMDE0MDAyMjAzWhcNMjUxMTE4MjM1OTU5
WjB6MUkwRwYDVQQFE0A5YTJkZjY3ZjQ2N2I3OWZkZmZkZGE3NDI1MTg2NzQwNzBj
YzUzZjZkOTk1MTQwM2M1YWY3MWQ3ZDNmNzE4NDJlMS0wKwYDVQQDEyRiMjVjOTcw
Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCqeXZw7XAkV/q/MNVxuxxqbtw1yjEpyR34y6lBb7x0+oH1
yKpVTxrGGxp5i+mA6+53o+gVZ8oTfj7G0ldt3pEOwVQ6FTjN3Q2N/uSCQhx1xwh/
LnQ2U7UrRA/3eQkCiiNd8sd31I9C7wv1qKKpjyMfznLIJhQ/dNZ5lijoGQKke1Dj
vUTQsh2zL4T6q/xS5rV0dewbLUd/qB2opnaOM59hm3OiNnPxmyzS3OQzmSTLC366
ST1cmH2M/CssYK7cWPNwDU9JgaBaWsGLX9EGjg3/v/cvT1+IpDLnw4Z4N9DKhW4f
N3xKuVyHHAIwBf8uJPsqSfWVTb9zw6/Vnj++iNi3AgMBAAGjggKxMIICrTAdBgNV
HQ4EFgQUWsEO+mWkekD0D43OVuvL1QdE8lswHwYDVR0jBBgwFoAUEF3XjVV4QKtD
Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04
ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw
MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB
kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3
MjVjMDQyOTQyL2EzOWU3NTQ2LTlkNzYtNDFkYy05OWQyLTEzOWM5NTI2ZjI5Yi5y
b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz
dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz
LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG
A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBACCsGAwDQYJKoZIhvcNAQELBQADggEBAKinJrdTU9zNW4LcI+Cw/xdLNEAb
fqMvWmB9kMqG7lR8PPHIaZRP502J6aUl52ser16Dt9ZcNbQW0mn66TcOTdM2cCQX
6zMzugkA13Lb54KomanlrpuCjU2rHNWEQuPokZFDgj3RB2lGdZHDWzCLmcknEGdn
7Z7BWicXYySsm2CSWeTPQG2RAAA27/lQ2KLPzAklF6ciEqSeUogtxtzHx6OjLj7N
44I6Z++CdTW2lzTc6GMG4is1Bo6ARUeHuR1kv8J8bFA8UJDvRcy6m0f6LqGn7Bxv
VCJGCVHAtke8LQuQj+kM2O2/GBAkbhRIhnXgU0idW2+vRFhDStVeP+ZP7FM=
-----END CERTIFICATE-----
Generated at Mon Oct 20 23:42:11 2025 by rpki-client